CVE-2004-0157 x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a maliciou...
MediumCVSS 4.6
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xonix | <= 1.4 | No fix listed |
| debian/xonix(Debian:12) | < 1.4-21 | 1.4-21 |
| debian/xonix(Debian:13) | < 1.4-21 | 1.4-21 |
| debian/xonix(Debian:14) | < 1.4-21 | 1.4-21 |
References
- 11382 third-party-advisory
- 1009789 vdb-entry
- shellcode.org
- DSA-484 patch vendor-advisory
- 5358 vdb-entry
- 10149 vdb-entry
- xonix-privilege-dropping(15873) vdb-entry
- Debian Security Tracker CVE-2004-0157 vendor-advisory